For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Krishna_251070's avatar
Krishna_251070
Icon for Nimbostratus rankNimbostratus
Mar 06, 2018

F5 LTM Monitor

Hello Experts,

I have this configuration written in a Cisco ACE config. I want to convert this to F5 config. Can anyone please help me to write the F5 equivalent config?

probe https ACE_PROBE
  port 8447
  faildetect 2
  ssl version all
  request method get url /path/file.html
  expect status 200 200
application delivery
BIG-IP
LTM

1 Reply

  • Andy_McGrath's avatar
    Andy_McGrath
    Icon for Cumulonimbus rankCumulonimbus
    Mar 06, 2018

    Taking it ine by line:

    port 8447

    The port 8447 is only needed as part of the monitor if the pool member is not using port 8447, else you can ignore it.

    faildetect 2

    Cisco ACE probes uses a failure count but the F5 uses a timeout, so to get the same you need to set a monitor interval of 15 (the Cisco ACE default for http probes) and a timeout of 31 (2 x interval + 1)

    ssl version all

    Use the default HTTPS monitor cipersuite configuration 

    request method get url /path/file.html

    The request (send) will be a HTTP 1.0 request from the ACE so you can use the following on the F5

    GET /path/file.html HTTP/1.0

    finally

    expect status 200 200

    In the receive of the monitor configure you are looking for the status response of 200 OK

    200 ok

    Complete monitor config:

    ltm monitor https /Common/ACE_PROBE {
    adaptive disabled
    cipherlist DEFAULT:+SHA:+3DES:+kEDH
    compatibility enabled
    defaults-from /Common/https
    destination *:*
    interval 15
    ip-dscp 0
    recv "200 ok"
    send "GET /path/file.html HTTP/1.0"
    time-until-up 0
    timeout 31
}